Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
File: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft (raw, json)
Hash identifier: SfgkBuet0X8Z3F7oK8MPltYjnk3wPGD7X3PSRoascgU=
Subject key identifier: B3:99:8C:C2:6D:A7:69:49:1E:80:B1:ED:17:33:51:C2:F3:74:B4:11
Authority key identifier: 4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
Certificate issuer: /CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Certificate serial: 01984A40D699E23C7305F8B8A48395AFBF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
Manifest number: 062A
Signing time: Sun 27 Jul 2025 05:00:19 +0000
Manifest this update: Sun 27 Jul 2025 05:00:19 +0000
Manifest next update: Mon 28 Jul 2025 05:00:19 +0000
Files and hashes: 1: 69EZo_UvSYLCIwLzPyqCblCyZzI.roa (hash: 2naW8CuEgpZKAi+BoeweFMMKRLa2fsvkiMt8udbwEtM=)
2: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl (hash: vXRGtj2SvQJUojwo0w0rcy1y8tbkLtiwn9wYmn+P2ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:d6:99:e2:3c:73:05:f8:b8:a4:83:95:af:bf:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Validity
Not Before: Jul 27 05:00:19 2025 GMT
Not After : Jul 28 05:00:19 2025 GMT
Subject: CN=b3998cc26da769491e80b1ed173351c2f374b411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:d3:8f:e7:d1:e0:d6:db:76:f6:50:01:b3:
cb:97:36:91:f1:2c:3e:d4:5e:6d:75:96:71:7c:14:
ce:6b:76:e4:bf:58:54:e1:d5:86:e0:30:59:3f:07:
dc:29:f5:93:d9:50:5a:63:04:43:39:3e:20:85:3b:
a4:d8:0e:4a:d1:52:5f:5e:d7:72:9f:38:d0:93:63:
81:01:43:b5:91:b3:4e:e3:96:2b:0a:e3:28:7a:c9:
14:10:b8:06:63:bf:ae:75:e6:c3:6d:7f:c3:1a:09:
79:1e:a8:99:6a:85:ae:3a:09:dd:19:ac:29:87:4b:
7f:86:9e:f3:09:15:fa:52:2b:0f:56:0f:30:22:06:
76:a2:9c:b9:b7:29:0f:77:ea:1d:2e:39:43:85:2c:
bc:86:85:77:d5:4e:be:8b:02:67:5c:6b:f4:d7:f1:
76:65:97:54:48:a4:d8:cc:94:68:10:d2:93:19:32:
cc:76:c1:d2:fe:5b:ec:e1:69:4d:03:e7:3d:d5:94:
24:50:f0:37:4f:00:cc:67:49:f4:68:e0:8b:f9:56:
55:44:3a:fe:31:86:2c:f0:68:28:02:23:d0:5e:6c:
67:24:70:13:93:04:22:9f:a4:b1:b8:5c:0c:7b:e1:
18:2a:d7:ed:51:f3:32:6f:d3:68:5d:90:3f:a9:7c:
f5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:99:8C:C2:6D:A7:69:49:1E:80:B1:ED:17:33:51:C2:F3:74:B4:11
X509v3 Authority Key Identifier:
keyid:4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:de:3d:98:61:00:0f:59:e1:9f:ec:af:53:8f:2b:93:66:2c:
17:51:e8:53:71:4a:24:0f:43:72:a4:e3:2e:62:dc:06:7a:09:
55:fa:fd:2f:83:27:70:c6:08:e2:16:9b:ef:16:04:9b:bf:97:
cf:56:3e:ab:86:d5:c2:b8:bc:d2:48:e7:bb:ae:f9:7e:c9:fa:
dd:09:74:ac:be:5e:6d:15:59:8a:36:4e:68:8b:55:b4:93:cb:
3c:e5:dd:1b:68:61:05:0c:f9:96:ca:3d:0e:67:9b:37:4e:7b:
21:6c:ef:d4:83:38:e6:7d:84:03:a0:65:8c:03:78:14:d6:07:
c2:fc:f4:92:86:8d:8c:e8:1c:56:a5:8c:db:8a:d6:f7:d2:05:
5c:1d:e0:1a:69:fd:5e:eb:c2:9d:87:80:0a:56:fb:ee:21:43:
4c:aa:8f:4e:29:b9:e4:6d:10:7d:91:6c:8c:65:5a:f2:5a:91:
ca:51:ca:05:33:0c:93:42:09:9a:94:c7:d3:b4:4d:68:b9:c6:
fc:bc:1f:bc:45:e3:8f:58:2e:46:fc:df:a7:0f:e4:f8:43:0d:
38:f9:28:33:8a:45:0a:e0:85:d7:24:50:71:62:0c:6f:32:c0:
a5:ec:fa:01:0b:7d:80:a6:ac:29:79:2e:a1:d5:51:c6:59:8c:
6d:6a:b3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:33:21 2025 by rpki-client